Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier: +VfiRQVYHriGD9X6tlK1hPrlFVyvNAC5ZC3VDILTxZs=
Subject key identifier: 0F:49:6E:C2:F5:29:2F:DC:F8:E4:01:86:DE:CD:53:AD:2B:A7:5F:8C
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 019D284E477FC455C4E43E778EDCD83ECBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number: 0211
Signing time: Thu 26 Mar 2026 04:01:51 +0000
Manifest this update: Thu 26 Mar 2026 04:01:51 +0000
Manifest next update: Fri 27 Mar 2026 04:01:51 +0000
Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: XW/fWUOp609F+Be4WPcVCVRd2HaAlN6uF0VpZckxHLE=)
2: pf5Zf2vmMKwv3V7bxVEW72mA5Ro.roa (hash: 25kq67NwiLZpvtq/lLKi0cW1juljgXPpgbg4/hkoeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:47:7f:c4:55:c4:e4:3e:77:8e:dc:d8:3e:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Mar 26 04:01:51 2026 GMT
Not After : Mar 27 04:01:51 2026 GMT
Subject: CN=0f496ec2f5292fdcf8e40186decd53ad2ba75f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:1f:b4:48:5f:f2:cf:3f:e7:49:93:cc:56:
21:6a:28:47:2c:c2:29:2d:39:f3:4b:71:01:51:76:
0d:92:60:ba:52:40:38:69:6c:bc:e2:8b:6f:c3:3b:
34:48:d8:56:6f:d0:ce:7e:a6:1a:b6:5c:a9:64:80:
93:f3:2f:e6:29:72:5b:64:48:bc:e7:7e:36:4b:7e:
ee:8e:dc:cf:e4:84:e2:10:40:de:6e:68:4d:73:a7:
e3:6c:9c:dd:76:15:88:a8:a5:d9:c2:50:af:87:35:
39:a6:f0:3d:1a:b0:cc:53:7a:07:2a:00:23:97:a9:
df:19:6b:94:c2:f0:f2:25:a8:19:a6:ee:54:3b:52:
71:a8:85:e2:37:21:34:48:2f:57:48:2e:d7:f9:f2:
2e:62:5c:99:a0:4a:0c:b4:c1:3e:d7:f9:57:d1:d0:
15:b2:1a:a4:33:33:72:19:11:3d:6c:95:d6:2d:c6:
e8:b3:1b:bf:8a:dc:29:00:5b:da:5c:34:a2:0a:98:
7b:7c:a9:39:eb:56:b4:2d:0e:d4:47:ab:59:09:75:
91:e3:a1:2f:37:e9:cd:89:0c:60:37:88:a9:7c:65:
5e:50:6e:ed:3e:a4:ec:2d:5a:7e:96:52:f3:d8:43:
ee:6b:67:00:c5:b9:db:e6:6f:74:86:1a:65:02:40:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:6E:C2:F5:29:2F:DC:F8:E4:01:86:DE:CD:53:AD:2B:A7:5F:8C
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:72:b9:a3:53:2b:46:80:ac:3e:ee:65:46:67:84:04:e6:6a:
6c:d9:e2:28:22:f6:6b:26:6e:e8:4d:16:16:a6:64:b9:00:2a:
34:7e:1f:ef:ee:99:49:9f:cd:e7:3a:59:0f:18:2a:08:4f:8e:
e7:f1:c0:5e:62:d5:98:4a:19:66:7e:ca:a8:07:f6:15:e4:ab:
34:4d:97:d9:a8:3b:d5:c3:02:31:26:38:34:6b:42:d7:9b:c6:
61:77:cb:8d:78:4f:6c:46:8e:2e:e2:d6:a1:9e:e9:94:ea:79:
dd:16:86:f5:38:71:e5:23:ed:9f:89:49:ff:95:ac:7f:72:2b:
7b:81:46:a7:ff:43:4e:07:d5:c7:d5:f7:f4:d5:a6:4d:73:a0:
ed:ed:f3:15:38:35:a6:d9:79:44:a0:9a:b9:ed:36:cc:2b:bd:
40:93:49:fb:c4:8e:18:df:d0:c6:9a:07:7b:d4:69:26:fe:97:
b2:47:47:1a:27:48:2d:ce:52:3d:14:ff:c5:a7:ad:53:cf:89:
b5:67:3f:b4:f1:ad:7e:45:a0:36:fc:3b:f4:9f:1e:c0:c1:93:
66:ef:b7:8f:6e:3e:05:9d:0a:53:e2:ff:34:92:c5:ba:e3:4f:
bf:8c:db:5b:49:fa:00:29:53:39:40:04:2a:d8:b5:ae:7b:9f:
9d:03:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:25:22 2026 by rpki-client